Google's Project Zero bug-hunting team has disclosed a Windows kernel flaw that's being actively exploited by miscreants to gain administrator access on compromised machines.
The web giant's bug report was privately disclosed to Microsoft on October 22, and publicly revealed just seven days later, after it detected persons unknown exploiting the programming blunder. The privilege-escalation issue was identified by Mateusz Jurczyk and Sergei Glazunov of Google Project Zero.
"The Windows Kernel Cryptography Driver (cng.sys) exposes a DeviceCNG device to user-mode programs and supports a variety of IOCTLs with non-trivial input structures," the bug report explains. "It constitutes a locally accessible attack surface that can be exploited for privilege escalation (such as sandbox escape)."
Malware already on a system, or a rogue insider, can potentially exploit this buggy ..
Support the originator by clicking the read the rest link below.
